“Since we enacted the PATRIOT Act almost three years ago, there has been tremendous public debate about its breadth and implications on due process and privacy.”